What does DNS stand for?

DNS stands for Domain Name System. It is the global system that translates a domain name such as yourbusiness.com into the technical addresses of the servers behind it, including your website host and your email provider. Without it, people would need to type numeric IP addresses instead of names.

How long does a DNS change take to work?

It depends on the TTL of the record you changed and on how long resolvers had cached the old value. Many record changes show up within an hour or a few hours, while nameserver changes can take up to 24 to 48 hours to be seen everywhere. Lowering the TTL in advance shortens the wait.

Will changing my DNS break my email?

Not if the email records stay correct. Email depends on MX records plus SPF, DKIM and DMARC TXT records. Problems happen when nameservers or hosts are switched and those records are not copied across, or when a record is deleted by mistake. Export your records before any change and test sending and receiving afterwards.

What is the difference between a registrar and a DNS provider?

The registrar is the company where you register and renew the domain. The DNS provider hosts the records that point the domain to your website and email. They are often the same company, but they do not have to be: your registrar's nameserver setting decides which provider is in charge.

Can I have two SPF records?

No. A domain should publish only one SPF record. If you use several services that send email for you, their entries must be combined into a single SPF record. Two separate SPF records cause an error, and receiving servers may then treat your mail as unauthenticated, which can push it to spam.

Should my web designer control my DNS?

Your designer can have access, but you should own the accounts. Keep the registrar and DNS logins in your business's name with your email and two-factor authentication. Then you can add or remove helpers when needed, and you are never locked out of your own website or email.

How can I see my current DNS records?

Log in to your DNS provider and view the zone, or use a free online lookup tool. A checker that shows MX, SPF, DKIM and DMARC together is the quickest way to spot email problems. Save a copy of what you see so you can restore it if something changes unexpectedly.

Speed & Security

DNS Explained for Business Owners: Records, Nameservers and the Mistakes That Break Email

By ITCM Team · Updated November 2026

DNS (the Domain Name System) is the internet's address book. When someone types yourbusiness.com or emails you@yourbusiness.com, DNS tells their device which server holds your website and which server accepts your email. Your DNS is a short list of records stored with whoever runs your nameservers, often your registrar or host. You rarely need to touch it, but one wrong edit can take your site offline or stop email for days. This guide explains the records that matter, how changes spread, and how to check yours safely.

Key takeaways

DNS turns your domain name into the server addresses for your website and email.
Nameservers decide where your DNS records live; the records decide where traffic goes.
A and CNAME records run your website, MX records run your email, TXT records prove you own the domain and protect your email.
Changes spread according to the record's TTL, so updates can take minutes to a day or two.
Most outages come from switching nameservers or hosts without copying the existing records.
You, the business owner, should control the account that holds your DNS.

What is DNS in simple terms?

Computers find each other with numeric IP addresses, but people remember names. DNS connects the two. Think of your domain as your business name in a phone directory and DNS records as the listings under it: one line says where your website lives, another says where your mail should be delivered, and others hold notes that services like Google or Microsoft check to confirm you own the domain.

When a customer visits your site, their device asks a DNS resolver, usually run by their internet provider or a public service, to look up your domain. The resolver finds your nameservers, reads the right record, and remembers the answer for a while. That memory, called caching, is why changes are not instant.

DNS record types every business owner should know

Your DNS zone may hold dozens of entries, but these six types cover almost everything a small business relies on:

A CNAME cannot point to an IP address, and as a rule you cannot place a CNAME on the bare domain alongside other records; some providers offer a workaround called CNAME flattening or ALIAS.
MX records have a priority number; the lowest number is tried first.
TXT records for email security are explained in detail in our guide to SPF, DKIM and DMARC.

Record	What it does	Business example
A	Points a name to an IPv4 server address	yourbusiness.com goes to your web host's server
AAAA	Points a name to an IPv6 address	Same as A, for newer IPv6 networks
CNAME	Makes one name an alias of another name, not an IP	www.yourbusiness.com points to yourbusiness.com or to a booking platform
MX	Tells the world which servers accept your email	Google Workspace, Microsoft 365 or your host's mail servers
TXT	Holds text used for verification and email security	SPF, DKIM and DMARC records, Google Search Console verification
NS	Names the nameservers that are in charge of your DNS	ns1.yourhost.com and ns2.yourhost.com

Nameservers vs DNS records: what's the difference?

Nameservers are set at your registrar and answer one question: which company's servers hold the official records for this domain? The records themselves live at that company. If your nameservers point to Cloudflare, editing records at your registrar does nothing, because the internet only reads Cloudflare's copy.

This is the single most common source of confusion. Before you change anything, check which nameservers your domain uses, then make edits only in that provider's DNS panel. Switching nameservers moves the whole zone at once, so every record must already exist at the new provider or your email and site will break.

What is DNS propagation and TTL?

TTL (time to live) is a number on each record, in seconds, that tells resolvers how long they may cache the answer. A TTL of 3600 means one hour. When you change a record, resolvers that cached the old value keep using it until the TTL runs out, so different visitors may see the old and new versions for a while. That delay is what people call propagation.

Industry guides published in 2025 and 2026 give typical times of about 1 to 4 hours for A and CNAME changes, a few hours for MX changes, and up to 24 to 48 hours for nameserver changes. To make a planned move smoother, lower the TTL to around 300 seconds a day or so before the change, then raise it again once everything works.

Common DNS mistakes that break email or your website

Changing nameservers to a new host without recreating the MX, SPF and DKIM records first, so email stops arriving.
Publishing two separate SPF records. A domain should have only one SPF record; two cause an SPF PermError and receivers may treat your mail as unauthenticated.
Exceeding SPF's limit of 10 DNS lookups by adding include entries for every tool you use.
Deleting an old record you did not recognise, which turned out to be the DKIM key or a domain verification record.
Pointing only the bare domain or only www to the new host, so one version of your address shows the old site or an error.
Letting the domain expire, which takes all DNS down with it. See what to do if your domain expired.

Who should control your DNS?

You should. The registrar account and the DNS provider account should be in your business's name, with your email address, and with two-factor authentication on. Your web designer, IT provider or email consultant can be added as a user or given access when needed, but if they are the only ones who can log in, you depend on them for every change and every emergency.

It is perfectly fine to keep DNS at your registrar, your host or a dedicated provider such as Cloudflare. What matters is that you know which one it is and can get in. Our guide on who should own your website and domain covers the handover questions to ask.

How do I check my DNS records?

You do not need technical tools to get a clear picture. Start with these steps:

Run your domain through our free email DNS checker to see MX, SPF, DKIM and DMARC at a glance.
Look up your domain's registrar and nameservers with an RDAP lookup, which replaced WHOIS in 2025.
Log in to the DNS provider and export or screenshot the full record list before any change.
After a change, test from mobile data as well as your office Wi-Fi, since each network may cache different answers.
Use our website health check to confirm the site loads over HTTPS after a DNS move.

When should you change DNS, and when should you get help?

Small, well-documented changes are safe for most owners: adding a TXT verification record for Google, or a CNAME your booking system gives you. Anything that touches email delivery or moves your nameservers is worth a second pair of eyes, because mistakes may only show up hours later when customer emails go missing. If you are setting up or moving business email, our business email setup service handles the records and tests delivery, and the business email setup guide explains the steps if you prefer to do it yourself.

How ITCM approaches DNS for client sites

Before we change anything, we export the current DNS zone so every existing record, especially email records, can be restored. We keep the domain and DNS in the client's own accounts and document what each record is for. Because ITCM builds the website and installable app first and you pay only if you are happy with the finished result, DNS changes for go-live happen after you have approved the site, with a lowered TTL and a test of both website and email afterwards.

DNS checklist for business owners

Know your registrar and your DNS provider, and make sure you can log in to both.
Turn on two-factor authentication on both accounts.
Keep an up-to-date export of your DNS records.
Confirm you have one SPF record, a DKIM record and a DMARC record.
Lower TTL before planned moves and test website and email after every change.
Turn on domain auto-renew so DNS never disappears with an expired domain.

Frequently asked questions

What does DNS stand for?: DNS stands for Domain Name System. It is the global system that translates a domain name such as yourbusiness.com into the technical addresses of the servers behind it, including your website host and your email provider. Without it, people would need to type numeric IP addresses instead of names.
How long does a DNS change take to work?: It depends on the TTL of the record you changed and on how long resolvers had cached the old value. Many record changes show up within an hour or a few hours, while nameserver changes can take up to 24 to 48 hours to be seen everywhere. Lowering the TTL in advance shortens the wait.
Will changing my DNS break my email?: Not if the email records stay correct. Email depends on MX records plus SPF, DKIM and DMARC TXT records. Problems happen when nameservers or hosts are switched and those records are not copied across, or when a record is deleted by mistake. Export your records before any change and test sending and receiving afterwards.
What is the difference between a registrar and a DNS provider?: The registrar is the company where you register and renew the domain. The DNS provider hosts the records that point the domain to your website and email. They are often the same company, but they do not have to be: your registrar's nameserver setting decides which provider is in charge.
Can I have two SPF records?: No. A domain should publish only one SPF record. If you use several services that send email for you, their entries must be combined into a single SPF record. Two separate SPF records cause an error, and receiving servers may then treat your mail as unauthenticated, which can push it to spam.
Should my web designer control my DNS?: Your designer can have access, but you should own the accounts. Keep the registrar and DNS logins in your business's name with your email and two-factor authentication. Then you can add or remove helpers when needed, and you are never locked out of your own website or email.
How can I see my current DNS records?: Log in to your DNS provider and view the zone, or use a free online lookup tool. A checker that shows MX, SPF, DKIM and DMARC together is the quickest way to spot email problems. Save a copy of what you see so you can restore it if something changes unexpectedly.

Get a website + app built for free

We build your website and mobile app first, and you see it finished. If you’re happy, you pay $150 one-time. If you’re not, you pay nothing.

See the $150 offer Free website audit

← All articles